php-src/ext
Christoph M. Becker f15f8fc573
Fix #79971: special character is breaking the path in xml function
The libxml based XML functions accepting a filename actually accept
URIs with possibly percent-encoded characters.  Percent-encoded NUL
bytes lead to truncation, like non-encoded NUL bytes would.  We catch
those, and let the functions fail with a respective warning.
2021-11-14 23:24:33 -08:00
..
bcmath Fix test 2019-12-16 10:32:49 -08:00
bz2 Fix #76735: Incorrect message in fopen on invalid mode 2020-09-23 10:54:06 +02:00
calendar Fix #80185: jdtounix() fails after 2037 2020-10-07 13:23:50 +02:00
com_dotnet Fix #62474: com_event_sink crashes on certain arguments 2020-10-26 11:48:57 +01:00
ctype Trim trailing whitespace in *.phpt 2018-10-14 19:45:12 +02:00
curl Fix #77493: curl_basic_009 fails with newer curl versions 2020-09-23 10:42:48 +02:00
date Revert "Updated to version 2021.5 (2021e)" 2021-11-03 16:13:05 +00:00
dba Fix #78808: [LMDB] MDB_MAP_FULL: Environment mapsize limit reached 2020-01-03 18:49:12 +01:00
dom Fix #79971: special character is breaking the path in xml function 2021-11-14 23:24:33 -08:00
enchant Fix #79311: enchant_dict_suggest() fails on big endian architecture 2020-02-28 15:43:44 +01:00
exif Make MAX_IFD_NESTING_LEVEL an actual nesting level 2020-08-31 09:28:59 +02:00
fileinfo Deny cloning of fileinfo objects 2020-10-26 16:50:20 +01:00
filter Fix #81122: SSRF bypass in FILTER_VALIDATE_URL 2021-06-20 21:49:49 -07:00
ftp Fix #55857: ftp_size on large files 2020-06-23 15:57:24 +02:00
gd Fix potential integer overflow detected by oss-fuzz 2020-08-24 17:35:04 +02:00
gettext Fix bug #70574: Move files to proper locale dir 2020-08-07 14:37:27 +02:00
gmp Fix leak in gmp_export() 2020-10-15 10:16:22 +02:00
hash Merge branch 'PHP-7.2' into PHP-7.3 2019-04-06 19:06:16 -07:00
iconv Make iconv errno support test pass on Solaris. 2020-10-09 15:24:36 +02:00
imap Fix #80710: imap_mail_compose() header injection 2021-04-26 21:43:03 -07:00
interbase Merge branch 'PHP-7.2' into PHP-7.3 2019-03-25 16:43:21 +01:00
intl Relax test expectation 2020-02-03 13:03:54 +01:00
json Merge branch 'PHP-7.2' into PHP-7.3 2019-04-23 12:43:32 +02:00
ldap fix memory leaks in ext/ldap/ldap.c 2020-07-28 10:23:10 +02:00
libxml Fix #79971: special character is breaking the path in xml function 2021-11-14 23:24:33 -08:00
mbstring Revert "Fix out-of-bounds write" 2020-10-26 15:40:12 +01:00
mysqli Fix mysqli_expire_password test for mariadb 2020-12-03 10:56:00 +01:00
mysqlnd Fix #78179: mysqli/mysqlnd transaction extensions 2020-09-18 15:29:44 +02:00
oci8 Merge branch 'PHP-7.2' into PHP-7.3 2019-02-20 11:11:06 +11:00
odbc Fix format specifier 2020-10-29 13:08:16 +01:00
opcache Fixed bug #80083 2020-09-17 10:12:10 +02:00
openssl Fix test for bug62890 to not depend on system cert store 2020-11-27 16:32:43 +00:00
pcntl Fix #78402: pcntl_signal() misleading error message 2019-12-20 11:02:20 +01:00
pcre Add additional preg_match test case 2020-04-23 17:35:09 +02:00
pdo Fix logic error in PDO 2020-09-25 16:28:48 +01:00
pdo_dblib Sync leading and final newlines in *.phpt sections 2018-10-15 04:32:30 +02:00
pdo_firebird Fix #76448: Stack buffer overflow in firebird_info_cb 2021-06-20 22:01:06 -07:00
pdo_mysql Support NO_BACKSLASH_ESCAPES with newer libmysqlclient 2020-09-18 15:24:57 +02:00
pdo_oci Fix #80027 Terrible performance using $query->fetch on queries with many bind parameters 2020-08-31 11:03:03 +02:00
pdo_odbc Fix #67465: NULL Pointer dereference in odbc_handle_preparer 2020-09-28 22:57:01 +02:00
pdo_pgsql Fix #80027 Terrible performance using $query->fetch on queries with many bind parameters 2020-08-31 11:03:03 +02:00
pdo_sqlite Fix #80027 Terrible performance using $query->fetch on queries with many bind parameters 2020-08-31 11:03:03 +02:00
pgsql Merge branch 'PHP-7.2' into PHP-7.3 2019-04-10 13:06:55 +02:00
phar Fix test 2021-08-23 23:43:32 -07:00
posix Fixed bug #79570 2020-06-19 17:31:28 +02:00
pspell Trim trailing whitespace in *.phpt 2018-10-14 19:45:12 +02:00
readline Enclose INI values containing {TMP} in quotes 2020-03-09 22:49:08 +01:00
recode Sync leading and final newlines in *.phpt sections 2018-10-15 04:32:30 +02:00
reflection Fixed bug #79062 2020-02-28 17:06:05 +01:00
session Fix brittle test 2020-07-22 20:45:56 +02:00
shmop Fix #79566: Private SHM is not private on Windows 2020-05-05 11:38:29 +02:00
simplexml Fix #79971: special character is breaking the path in xml function 2021-11-14 23:24:33 -08:00
skeleton skeleton: support PHP 7.2 2019-01-02 11:21:25 +01:00
snmp Fix #70461: disable md5 code when it is not supported in net-snmp 2020-11-02 11:36:26 +01:00
soap Fix newly introduced compiler warning 2021-02-03 12:42:28 +01:00
sockets Fix memory leak on socket_sendmsg() / socket_recvmsg() error 2020-08-05 16:41:40 +02:00
sodium Null terminate the sodium_crypto_kx_keypair() result 2020-08-14 15:51:31 +02:00
spl Fixed bug #79710 2020-06-19 10:46:26 +02:00
sqlite3 Enclose INI values containing {TMP} in quotes 2020-03-09 22:49:08 +01:00
standard Fix #81211: Symlinks are followed when creating PHAR archive 2021-08-23 23:25:16 -07:00
sysvmsg Trim trailing whitespace in *.phpt 2018-10-14 19:45:12 +02:00
sysvsem fix typo in sysvsem.c 2018-10-23 14:57:03 +02:00
sysvshm Sync leading and final newlines in *.phpt sections 2018-10-15 04:32:30 +02:00
tidy Don't crash on uninitialized tidy object 2020-10-22 16:04:22 +02:00
tokenizer Sync leading and final newlines in *.phpt sections 2018-10-15 04:32:30 +02:00
wddx Merge branch 'PHP-7.2' into PHP-7.3 2019-01-07 01:04:16 -08:00
xml Fix #79922: Crash after multiple calls to xml_parser_free() 2020-08-10 12:23:44 +02:00
xmlreader Sync leading and final newlines in *.phpt sections 2018-10-15 04:32:30 +02:00
xmlrpc Fix #78173: XML-RPC mutates immutable objects during encoding 2019-06-18 17:08:11 +02:00
xmlwriter Fix #79191: Error in SoapClient ctor disables DOMDocument::save() 2020-02-03 23:31:46 +01:00
xsl Fix #70078: XSL callbacks with nodes as parameter leak memory 2020-01-30 13:04:57 +01:00
zend_test Merge branch 'PHP-7.2' into PHP-7.3 2019-10-25 12:50:12 +02:00
zip Fix #81420: ZipArchive::extractTo extracts outside of destination 2021-09-20 21:29:24 -07:00
zlib Future-proof email addresses 2018-11-01 18:35:32 +02:00
ext_skel.php